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the article. The information relating to the article can 
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Description 

The subject invention relates to labeling of articles. 
More particularly, it relates to a method for labeling arti- 
cles of manufacture to identify their source and prevent 
counterfeiting. 

Counterfeiting and forgery of goods are well known 
problems. Manufacturers of luxury goods such as 
watches, luggage, perfume, etc. must constantly deal 
with counterfeiters who produce cheap imitations. And 
even inexpensive goods such as T-shirts can acquire 
considerable cachet, and associated high markup, by 
being marked with the image of a famous cartoon char- 
acter, or other valuable, proprietary logo. 

While the counterfeiting of consumer goods or 
other articles of manufacture thus represents a problem 
which is probably comparable to problems associated 
with the counterfeiting of documents which represent 
value (e.g., currency), until recently no comparable 
efforts have been made to combat this problem. While 
there is a long history of techniques such as elaborate 
engraving and use of special paper stocks to prevent 
counterfeiting of currency, in general similar efforts have 
not been used even for the most expensive luxury 
goods 

Another approach which has been used to combat 
counterfeiting of documents is the use of encryption. 
U.S. Patent No. 4.853.961; to: Pastor; issued: Dec. 18, 
1987 describes one method for encrypting information 
extracted from a document and imprinting the document 
with the encrypted information in order to verify the 
information contained in the document. Similarly, U.S. 
Patent No. 5,388,158, issued: February 7, 1995; to: Wil- 
liam Berson teaches a method wherein a document is 
scanned to produce a digital signal which is com- 
pressed, encrypted, and coded as a two dimensional 
bar code, which is incorporated into a label which is 
affixed to the document. 

While these and other similar methods have been 
useful for their intended purpose, that purpose has 
been limited to the verification of the information content 
of a document. In general, those who use such tech- 
niques either are not concerned that the information be 
duplicated so long as it is not altered, or, as with cur- 
rency, are willing to rely on other techniques to detect 
duplication. Since much of the value of the sort of arti- 
cles of manufacture which are likely to be counterfeited 
inheres in the fact that each particular item is essentially 
indistinguishable from other items of the same type, 
there has been, to applicant's best knowledge, no previ- 
ous attempt to use encryption techniques to verify the 
source of articles of manufacture. 

Another related use of encryption relates to the 
identification of individuals. Commonly assigned, co- 
pending European patent application No. 0599558; by: 
Marcus; filed; November 19, 1993 describes an identifi- 
cation card which includes an encrypted representation 
of a biometric characteristic of an individual to be identi- 



fied (e.g., a fingerprint or facial image). This encrypted 
representation is decrypted and compared to the indi- 
vidual. Again, since articles of manufacture which are 
likely to be counterfeited in general do not have distin- 

5 guishing characteristics, applicant believes that there 
has been no effort to apply such techniques to the prob- 
lem of verifying the source of an article of manufacture. 
(Even if an article includes a unique marking such as a 
serial number, in general there is no convenient way to 

10 determine if the serial number is original or a duplica- 
tion.) 

Thus, it is an object of the subject invention to pro- 
vide a method whereby encryption techniques may be 
used to verify the source of articles of manufacture. 

15 The above object is achieved, and the disadvan- 
tages of the prior art are overcome in accordance with 
the subject invention by mans of a method which 
includes the steps of preparing a label which includes 
information relating to an article of manufacture and 

20 encrypting at least a portion of the information. The arti- 
cle, the label, and a tangible representation of the 
encrypted information are then securely associated. 

As used herein, the term "label" includes not only 
conventional labels which are glued or otherwise affixed 

25 to an article but also includes the marking which is 
associated with the article and which is sufficiently likely 
to remain associated with the article through the period 
of interest. For example, the label for an expensive 
watch or piece of jewelry may be engraved on the article 

30 itself, while the label for a relatively inexpensive appli- 
ance may be printed on the shipping carton. 

Also, as used herein "securely associating" means 
that the article, label, and the tangible representation of 
the encrypted information are associated in a manner 

35 such that the likely expense and difficulty of trying to 
separate and reuse the label and tangible representa- 
tion will exceed any benefit which can be obtained 
thereby. 

In accordance with one aspect of the subject inven- 
40 tion, the information included on the label includes veri- 
fying information, such as expiration date, a particularly 
identification of the article such as a serial number, an 
identification of an authorized provider of the article, or 
a description of the article, while protecting against 
45 unauthorized use of duplicate labels. 

In accordance with another aspect of the subject 
invention, the label includes an unreproduceable pat- 
tern and the method includes the further step of includ- 
ing an encrypted description of the unreproduceable 
so pattern with the encrypted information. 

In accordance with another aspect of the subject 
invention, the encrypted information is encrypted with a 
private key of a public/private key pair and the corre- 
sponding public key is available to parties who wish to 
55 validate the source of the article. 

Those skilled in the art will recognize that the above 
object is achieved, and that the disadvantages of prior 
art are overcome by the subject invention. Other objects 
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and advantages of the subject invention will be apparent 
to those skilled in the art from consideration of the 
attached drawings and the detailed description set forth 
below. 

Fig. 1 is a semi -schematic plan view of a label used 
in practicing the method of the subject invention. 

Fig. 1 shows label 10 which can be used in accord- 
ance with the subject invention to verify the source of an 
article of manufacture. LabeMO can include conven- 
tional logo 12 and/or brand name 14, as well as any 
other information which might normally be found on a 
product label. Additionally, in one embodiment of the 
subject invention, verifying information is included in 
field 16, 20, 22, and 24. These fields might contain, for 
example, a serial number uniquely identifying a particu- 
lar article, a description of such article in terms of size, 
color, model, etc.. the identity of an authorized provider 
or reseller of such an article, or an expiration date 
beyond which a sate would not be authorized. As will be 
described further below, such verifying information pro- 
vides a degree of protection against the unauthorized 
use of duplicate labels since a particular label will have 
only limited usefulness in terms of the time, place, or 
articles with which it may be used. (Though it has been 
noted above that serial numbed have had limited useful- 
ness in preventing counterfeiting of articles ol manufac- 
ture, a serial number can be useful where articles are 
sold in large lots since a counterfeiter would need to 
copy labels for each item in a lot.) 

All, or selected portions, of the information on label 
10 is then replicated in a scannable form in field 28. 
Preferably, the information is replicated in the form of a 
two dimensional bar code such as is specified in the 
well known PDF 417 standard. All, or selected parts, of 
the information on label 10 is then digitally signed in a 
conventional manner in field 30. 

In accordance with the subject invention, a manu- 
facturer or authorized provider of an article of manufac- 
ture prepares a label such as shown in Fig. 1 using an 
encryption key which the manufacturer or other author- 
ized provider keeps in secret. Label 10 is then securely 
associated with the article; typically by affixing it to the 
article so that it cannot be removed without destroying 
it. 

It should be noted that other methods of securely 
associating label 10 with the article, such as printing it 
on a container for the article, are also within any con- 
templation of the subject invention. Further, label 10 
need not comprise a single element. For example, the 
information in field 28 and/or the digital signature in field 
30 may be printed on an invoice or manifest which 
accompanies the article. As noted above, secure asso- 
ciation of label 10 with an - article of manufacture 
requires only that it be made sufficiently difficult or 
expensive in some manner so that it is likely that the 
cost of unauthorized reuse of label 10 will exceed any 



benefit. 

While the use of verifying information as described 
above limits the ability of a counterfeiter to use duplicate 
labels, some articles of particularly great value may 
5 require more nearly total protection. This is achieved in 
accordance with one embodiment of the subject inven- 
tion by incorporation of an unreproduceable pattern in 
or on label 10. Such a pattern is shown as elements 32 
in Fig. 1. Preferably elements 32 are magnetic fibers as 
io are described in U.S. Patent No. 5,003,291; to: Strom- 
Olsen; issued; March 26, 1991 which is hereby incorpo- 
rated by reference, which is incorporated in the stock on 
which label 10 is printed when the stock is manufac- 
tured. Since the fibers are randomly distributed through 
15 the stock as it is formed, the distribution pattern of such 
fibers in a particular label cannot be reproduced without 
extraordinary effort. When the label is produced, unre- 
produceable pattern 32 is scanned and a tangible repre- 
sentation, which is preferably a barcode representation, 
20 is incorporated in field 34 and digitally signed together 
with the information in field 28. A very high degree of 
confidence of the authenticity of label 10 may then be 
achieved by scanning patterns 32 and comparing it to 
the description in field 34. Verification of the description 
25 in field 34 will then verify the authenticity of label 10. 

Methods for detecting the presence of magnetic fib- 
ers are known and are described in the above-refer- 
enced U.S. Patent No. 5,003,291 and a sufficiently 
precise description may be generated by scanning label 
30 10 with a detector having a sufficiently small aperture. 

Other methods of producing an unreproduceable 
pattern are known; one of the simplest being simply to 
spatter a sheet of paper stock with drops of ink or paint. 
Any such method which can be described and scanned 
35 with sufficient precision is within contemplation of the 
subject invention; where the degree of precision needed 
is determined by the desired degree of protection, since 
clearly the more precisely the unreproduceable pattern 
is described, the more difficult it will be to approximate. 
40 in another preferred embodiment of the subject 
invention, the information on label 10 is digitally signed 
using the private key of a public/private key pair. (Pub- 
lic/private key encryption is a known encryption tech- 
nique where one key of a key pair is used to encrypt 
45 data and the other to decrypt the data and the private 
key cannot be determined from knowledge of the data 
and the public key.) Thus, the public key may be niade 
widely available while the private key is kept in secret so 
that articles of manufacture may be readily verified in 
so accordance with the subject invention but can only be 
so labeled by a manufacturer or authorized provider 
having knowledge of the private key. 

One disadvantage of such a system is that where a 
large a number of parties are providing articles to a sin- 
55 gle party for verification. The verifying party is then 
faced with the problem of maintaining a database of 
public keys for each of the providing parties. This prob- 
lem can be overcome in accordance with another 



iNSIXXIO: <EP 0889448A2_I_> 



5 



EP 0 889 448 A2 



6 



embodiment of the subject invention by means of a 
"nested key" system, wherein a trusted third party deliv- 
ers distinct private, encryption keys to each of the pro- 
viding parties together with a corresponding decryption 3. 
key which has been encrypted with the third party's pri- 5 
vate. encryption key. The providing parties then digitally 
sign label 10 as described above and incorporate the 
encrypted decryption key on label 10 Any party wishing 
to verify label 10 need only have knowledge of the 
trusted third party's public, decryption key to recover the w 
deciyption key needed to verify digitally signed label 10. 4. 

The method of the subject invention may also be 
used to control the production of articles by licensees of 
trademarks or other intellectual property The trademark 
licenser may control the supply of labels to the trade- 15 
mark licensee to control or monitor the number of arti- 
cles produced. Alternatively, the licensee may label the 5. 
articles as described above while the licenser controls 1 
the process of digitally signing the labels 

It should also be noted that stock having an unre- so 
produceable pattern in combination wrth an encrypted 6. 
or digitally signed description o* that pattern can be 
used to produce valuable documents such as currency, 
or security tapes used to provide evioerv:e of tampering 

Digital signing is a well known lechmque for show- 25- 
ing that informatipn has not been changed, wherein a 
portion of the information selected by a "hash function" 7. 
is encrypted to provide a "digital signature*. By again 
applying the "hash function" to the information and com- 
paring the result to the decrypted signature the informa- 30 
tion may be verified. However, other protocols wherein 
all or part of the particular information is encrypted in 
order to assure its authenticity are known and such 
techniques are within the contemplation of the sub-con- 
vention. 35 

The embodiments described above have been pro- 
vided by way of illustration only and other embodiments 
of the sub-convention will be apparent to those skilled in 
the art from consideration of the above detailed descrip- 
tion and the attached drawings. Accordingly, limitations 40 
on the subject invention are to be found only in the 
claims set forth below. 8. 

Claims 

45 

1. A method for verifying the source of an article of. 
manufacture, said method comprising the steps of: 

9. 

a) preparing a label, said label including infor- 
mation relating to said article. so 

b) encrypting at least a portion of said informa- 
tion included on said label; 

c) securely associating said article, said label, 
and a tangible representation of said encrypted 
information. 55 

2. A method described in Claim 1 wherein said infor- 
mation included on said label includes verifying 



information for protecting against unauthorized use 
of duplicate labels. 

A method as described in Claim 2 wherein said ver- 
ifying information includes information consisting 
of: an expiration date, a unique identification of said 
article of manufacture, an identification of a pro- 
vider of said article of manufacture, or information 
describing said article of manufacture. 

A method as described in Claim 1 wherein said 
label further includes an unreproduceable pattern 
and said method includes the further step of includ- 
ing a description of said unreproduceable pattern 
with said information included on said label. 

A method as described in Claim 4 wherein said 
unreproduceable pattern is formed from magnetic 
fibers embedded in said label. 

A method as described in Claim 4 wherein said 
encrypted information is encrypted with a first pri- 
vate key of a first public/private key pair and a cor- 
responding first public key is available to parties 
who wish to validate the source of said article. 

A method as described in Claim 6 wherein a trusted 
third party provides a party producing said label 
with said first private key and with an encryption of 
said first public key by a second private key kept 
secret by said trusted third party, said producing 
party including said encryption of said first public 
key with said label and said trusted third party pro- 
viding a corresponding second public key to parties 
who wish to verify the source of said article; 
whereby said parties can recover said first public 
key from said label so that articles from a large 
number of different sources can be verified without 
the need to maintain a corresponding database of 
public keys. 

A method as described in Claim. 1 wherein said 
encrypted information is encrypted with a first pri- 
vate key of a first public/private key pair and a cor- 
responding first public key is available to parties 
who wish to validate the source of said article. 

A method as described in Claim 8 wherein a trusted 
third party provides a party producing said label 
with said first private key and with an encryption of 
said first public key by a second private key kept 
secret by said trusted third party, said producing 
party including said encryption of said first public 
key with said labet and said trusted third party pro- 
vidinga corresponding second public key to parties 
who wish to verify the source of said article; 
whereby said parties can recover said first public 
key from said label so that articles from a large 
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number of different sources can be verified without 
the need to maintain a corresponding database of 
public keys. 

1 0. A method for labeling an article, said method com- s 
prising the steps of 

a) providing a label for said article, said label 
having an unreproduceable pattern ; 

b) scanning said label to generate a signal rep- w 
'esentat.^e of said unreproduceable pattern; 

c) encrypting at least a portion of said signal; 

d) secu.ely associating a tangible representa- 
tion of said encrypted .portion of said signal, 
sad article and said label. 



1 1. A method for ve'.fynng a label, said label having an 
unrepfoducea^e patter n. and a tangible represen- 
tation of nt least an encrypted portion of a signal 
description o< uicl unreproduceable pattern being 
secure^ assorted w.th said label, said method 
composing the steps of 

a) scanntnq M ri label lo generate a second 
signal deso .ptive of said unreproduceable pat- 
tern. 



15 



25 



b) reading said tang«ble representation to 
recover said encrypted portion of said descrip- 
tive signal. 

c) decrypting said encrypted portion, or so 
enayptmg a corresponding portion of said sec- 
ond signal, and 

d) comparing said decrypted portion of said 
descriptive signal with said corresponding por- 
tion of said second signal, or comparing said 35 
encrypted portion of said descriptive signal 
with said corresponding encrypted portion of 
said second signal, to verify said label. 
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